I want to test to see if my antiviruses are working correctly and if possible to see which one is better. As each antivirus has two parts I want to test both.
For signature-based detection, I use the EICAR test file and I can also use some known viruses in restricted environments.
But what about behavioral detection like HIPS (Eset and others) and PDM (Kaspersky and maybe others)?
I wrote a little program that combines two parts of EICAR string and writes it in a file. At first Kaspersky detected the exe file with PDM when I ran it.
After a while it stopped detecting the exe file and just removes the file that my exe writes to disk.
Is there any test file similar to EICAR but for behavioral detection (I doubt that there is)? Do you have any suggestion for a program to write for this purpose?